private void verifyUserGroup(ShareACL acl) {
String userOrGroup = null;
if (acl == null) {
return;
}
if (acl.getUser() == null && acl.getGroup() == null) {
acl.cancelNextStep(ShareACLOperationErrorType.USER_OR_GROUP_NOT_PROVIDED);
_log.error("User or group is missing.");
} else if (acl.getUser() != null && acl.getGroup() != null) {
acl.cancelNextStep(ShareACLOperationErrorType.USER_AND_GROUP_PROVIDED);
_log.error("Either user or group should be provided. Never both.");
} else {
String domain = acl.getDomain();
if (domain == null) domain = "";
domain = domain.toLowerCase();
if (acl.getUser() != null) {
userOrGroup = domain + acl.getUser().toLowerCase();
} else {
userOrGroup = domain + acl.getGroup().toLowerCase();
}
}
if (userOrGroup != null) {
if (!userGroupList.contains(userOrGroup)) {
userGroupList.add(userOrGroup);
} else {
acl.cancelNextStep(ShareACLOperationErrorType.MULTIPLE_ACES_WITH_SAME_USER_OR_GROUP);
_log.error("There are multiple ACEs with same user or group.");
}
}
// below code is to validate domain
if (acl.getDomain() != null && acl.getUser() != null) {
if (acl.getUser().contains("\\")) {
acl.cancelNextStep(ShareACLOperationErrorType.MULTIPLE_DOMAINS_FOUND);
_log.error("Multiple Domains found. Please provide either in user or in domain field.");
}
}
if (acl.getDomain() != null && acl.getGroup() != null) {
if (acl.getGroup().contains("\\")) {
acl.cancelNextStep(ShareACLOperationErrorType.MULTIPLE_DOMAINS_FOUND);
_log.error("Multiple Domains found. Please provide either in group or in domain field.");
}
}
}
private void reportDeleteErrors(CifsShareACLUpdateParams param) {
String opName = ShareACLOperationType.DELETE.name();
// Report Add ACL Errors
ShareACLs shareAcls = param.getAclsToDelete();
if (shareAcls == null || shareAcls.getShareACLs().size() == 0) return;
List<ShareACL> shareAclList = shareAcls.getShareACLs();
for (ShareACL acl : shareAclList) {
if (!acl.canProceedToNextStep()) {
ShareACLOperationErrorType error = acl.getErrorType();
switch (error) {
/*
* case SNAPSHOT_EXPORT_SHOULD_BE_READ_ONLY: { throw
* APIException.badRequests.snapshotExportPermissionReadOnly();
* }
*/
case USER_AND_GROUP_PROVIDED:
{
throw APIException.badRequests.bothUserAndGroupInACLFound(
acl.getUser(), acl.getGroup());
}
case USER_OR_GROUP_NOT_PROVIDED:
{
throw APIException.badRequests.missingUserOrGroupInACE(opName);
}
case MULTIPLE_ACES_WITH_SAME_USER_OR_GROUP:
{
String userOrGroup = acl.getUser() == null ? acl.getGroup() : acl.getUser();
throw APIException.badRequests.multipleACLsWithUserOrGroupFound(opName, userOrGroup);
}
case MULTIPLE_DOMAINS_FOUND:
{
String domain1 = acl.getDomain();
String userOrGroup = acl.getUser() == null ? acl.getGroup() : acl.getUser();
String domain2 = userOrGroup.substring(0, userOrGroup.indexOf("\\"));
throw APIException.badRequests.multipleDomainsFound(opName, domain1, domain2);
}
case ACL_NOT_FOUND:
{
throw APIException.badRequests.shareACLNotFoundFound(opName, acl.toString());
}
default:
break;
}
}
}
}
private CifsShareACL getExistingACL(ShareACL requestAcl) {
CifsShareACL acl = null;
String domainOfReqAce = requestAcl.getDomain();
if (domainOfReqAce == null) domainOfReqAce = "";
String userOrGroup =
requestAcl.getUser() == null ? requestAcl.getGroup() : requestAcl.getUser();
// Construct ACL Index
StringBuffer aclIndex = new StringBuffer();
aclIndex.append(
this.fs == null ? this.snapshot.getId().toString() : this.fs.getId().toString());
aclIndex.append(this.shareName).append(domainOfReqAce).append(userOrGroup);
acl = this.queryACLByIndex(aclIndex.toString());
return acl;
}
private void reportAddErrors(CifsShareACLUpdateParams param) {
String opName = ShareACLOperationType.ADD.name();
// Report Add ACL Errors
ShareACLs shareAcls = param.getAclsToAdd();
if (shareAcls == null || shareAcls.getShareACLs().size() == 0) return;
List<ShareACL> shareAclList = shareAcls.getShareACLs();
for (ShareACL acl : shareAclList) {
if (!acl.canProceedToNextStep()) {
ShareACLOperationErrorType error = acl.getErrorType();
switch (error) {
case SNAPSHOT_SHARE_SHOULD_BE_READ_ONLY:
{
throw APIException.badRequests.snapshotSMBSharePermissionReadOnly();
}
case INVALID_PERMISSION:
{
if (acl.getPermission() != null) {
throw APIException.badRequests.invalidPermissionForACL(acl.getPermission());
} else {
throw APIException.badRequests.missingValueInACE(opName, REQUEST_PARAM_PERMISSION);
}
}
case USER_AND_GROUP_PROVIDED:
{
throw APIException.badRequests.bothUserAndGroupInACLFound(
acl.getUser(), acl.getGroup());
}
case USER_OR_GROUP_NOT_PROVIDED:
{
throw APIException.badRequests.missingUserOrGroupInACE(opName);
}
case MULTIPLE_ACES_WITH_SAME_USER_OR_GROUP:
{
String userOrGroup = acl.getUser() == null ? acl.getGroup() : acl.getUser();
throw APIException.badRequests.multipleACLsWithUserOrGroupFound(opName, userOrGroup);
}
case MULTIPLE_DOMAINS_FOUND:
{
String domain1 = acl.getDomain();
String userOrGroup = acl.getUser() == null ? acl.getGroup() : acl.getUser();
String domain2 = userOrGroup.substring(0, userOrGroup.indexOf("\\"));
throw APIException.badRequests.multipleDomainsFound(opName, domain1, domain2);
}
case ACL_EXISTS:
{
throw APIException.badRequests.shareACLAlreadyExists(opName, acl.toString());
}
// case ACL_NOT_FOUND:
default:
break;
}
}
}
}